3 ms·
But, if the server sends you a private resource, this implies the server must already know your identity. Being private it's not supposed to send it to anyone e
by tripzilch 8y ago
But, if the server sends you a private resource, this implies the server must already know your identity. Being private it's not supposed to send it to anyone else, so it needs to identify you in order to know "does this user have access to this resource?".
Am I missing something here?
- neverfone 8y agoYes, private doesn't necessarily mean authenticated, it just means shouldn't be saved in a shared cache. For example, "weather_at_your_geoip.js".